Security & compliance
How Telleo handles your calls, your leads and your customers.
What we store
For each call: the transcript, the analysis (outcome, summary, score, answers), timings and call-health diagnostics, and the recording when recording is switched on for your line. For each lead: the fields you capture in the CRM.
Who can see it
Transcripts, summaries and outcomes are visible to team members who can open the call log, and are not restricted per role; health verdicts and technical diagnostics are for your admins, and you choose which roles see full phone numbers. A sales head sees their own reporting line in the team view.
Where it runs
The live voice pipeline runs on servers in Mumbai. The platform that stores your CRM data and call records is not hosted only in India. If data residency in India is a requirement for you, tell us before you start.
Who processes it
Like every voice AI product, Telleo relies on specialist providers: telephony (Plivo), speech recognition, language models and voice engines (for example Google Cloud and Sarvam). Audio and text pass through them to run the call and the analysis.
In transit
Calls are streamed to the voice pipeline over encrypted connections, and each call's audio stream is opened with a single-use token, so a stream link can't be reused.
Your data
Your leads and call records belong to you. To ask for an export or deletion, write to us and we'll tell you what's possible and how long it takes.
Calling responsibly
An AI that calls your customers needs rules it can't skip.
DLT registration
Commercial calling in India requires DLT registration. We complete it with you; it is charged at actuals, ₹5,900 a year.
Who and when
You decide which leads are called and the hours campaigns run. Your outcome rules stop automated retries to not-interested leads; leave them out of bulk campaigns and manual calls too.
Built-in limits
Daily call caps, 30-second duplicate protection, a maximum call length per agent and no dialling without balance.
Honest agents
We recommend that every agent says it is an AI assistant in its opening line, and that its script steers away from advice only a licensed person should give.
Once it comes into force (30 days after Gazette publication; the A2P provisions after 60 days), TRAI's September 2026 amendment to the commercial-communication rules treats AI voice calls as application-to-person (A2P) calls that must be declared in advance to the telecom operator, and limits calls based on a customer's enquiry to seven days from that enquiry. Talk to us about how this applies to your campaigns. Read our guide to TRAI and DLT rules and confirm your specific case with your telecom provider or counsel.
What we don't claim
- We do not hold SOC 2, ISO 27001 or HIPAA certification today.
- We do not claim that all your data stays in India; only the live voice pipeline runs in Mumbai.
- We do not guarantee regulatory compliance on your behalf. You decide who is called, when and with what consent.
Questions from your security or legal team: [email protected]. Privacy policy: vacademy.io/privacy-policy.
Hear it on a real phone call.
Book a 20-minute demo and we'll build a first agent around your script, or ring our test line and talk to one right now.